Listicle · Reviewed 2026

Best password managers of 2026 — tested and ranked

Eight password managers, ranked. We've used each daily across Windows, Mac, iOS, Android and a self-hosted server, then put them against the same set of criteria — security architecture, breach history, free-tier completeness, paid-tier value, platform support, and operational quality. The result: an honest 2026 ranking, with explicit picks for different user profiles.

Methodology — how we ranked

Every product on this list was tested against the same six criteria, weighted by what most users actually need:

• Security architecture (25%): cipher choices (AES-256), key derivation iterations (PBKDF2 600K+ or Argon2id), zero-knowledge guarantees, public audit history, breach record.
• Free tier (20%): Is the free tier actually usable? Or does it crippling restrict device count, item count, or sync to upsell paid?
• Paid tier value (15%): What you pay for, against what you get. Family plan economics for multi-user households.
• Platform support (15%): Native apps on Windows, Mac, Linux, iOS, Android, all major browsers, plus a CLI for technical users.
• UX polish (15%): Day-to-day usability — autofill reliability, vault search, item organisation, mobile experience.
• Open source & transparency (10%): Source code published, build reproducibility, audit accessibility, self-hosting option.

Cosmetic features (themes, icons, animations) were excluded — they don't materially affect security or workflow. Affiliate programs (which several products run) did not affect rankings; we link to alternatives via affiliate where they exist, but recommended Bitwarden first despite Bitwarden having no affiliate program.

1. Bitwarden — best overall

Score: 92/100. Best for: nearly everyone.

Bitwarden wins on the combination most users need: a free tier that genuinely works, paid tier at one-third the price of competitors, open-source code on GitHub, no public breach record, and self-hosting available officially or via the Vaultwarden community fork. The UI is functional rather than gorgeous — that's the trade-off — but for the vast majority of password manager use cases, the gap doesn't matter.

What we like:

• Free tier covers unlimited passwords across two devices — phone + desktop browser is the typical setup, and that's what free supports.
• Premium at $10/year (vs $36 for 1Password, $60 for Dashlane) is the most aggressive pricing in the category.
• Family at $40/year for six Premium accounts is unbeaten.
• Open source on GitHub — every client and the server are published, audited externally by Cure53 in 2018 and 2020.
• Self-hosting officially supported via Docker compose, plus the popular Vaultwarden community fork on Rust.
• Native apps on Windows, Mac, Linux, iOS, Android, plus extensions for every major browser, plus a CLI for scripts.
• Zero public breach record across nearly a decade.

What we don't:

• UI polish lags 1Password — typography is plain, spacing is dense, animations absent.
• Vault Health Reports require Premium — 1Password's Watchtower is free.
• Manifest V3 transition in 2024 caused intermittent extension lock issues; mostly fixed by 2026.
• Linux Electron baseline rather than native — fine but not great.

Verdict: if you don't have a specific reason to pick something else — pick Bitwarden. Full Bitwarden review →

2. 1Password — best polish, paid only

Score: 88/100. Best for: design-forward users who'd pay for the experience.

1Password is the polished alternative. The macOS app feels native (because it's built native, not Electron). Watchtower vault health is built-in to all paid tiers. Travel Mode hides sensitive vaults at borders. The Secret Key adds 128 bits of entropy on top of the master password, giving extra cushion against weak-master attacks. The trade-off: no free tier (14-day trial then paywall), and at $36/year individual ($60 family for 5 users), pricing is roughly 3× Bitwarden.

What we like:

• Best UX in the category — Quick Access global hotkey, smart search, item history with restore, smart folders.
• Watchtower dashboard built-in — compromised passwords, weak entries, sites that gained 2FA support.
• Secret Key adds 128-bit local entropy on top of master password — server breach cannot brute-force vault.
• Travel Mode for crossing borders — temporarily remove sensitive vaults from device.
• Excellent Apple ecosystem integration — Watch app, Universal Sign-In, native Safari support.
• No breach history.

What we don't:

• No free tier — 14-day trial then paywall. For students or budget-constrained users this is a deal-breaker.
• $36/year individual is 3× Bitwarden Premium. Family at $60/year for 5 users is 1.5× Bitwarden Family.
• Closed source — clients are partially open, server is closed. Trust requires accepting their audit reports.
• No self-hosting option.
• Linux app exists but lags Mac/Windows in feature parity.

Verdict: if budget allows and polish matters, 1Password is the obvious upgrade from Bitwarden. Bitwarden vs 1Password →

3. Proton Pass — best privacy-first newcomer

Score: 82/100. Best for: privacy-aligned users already in the Proton ecosystem.

Proton Pass launched in 2023 from the team behind ProtonMail. It joined the password manager category late but came in with the right DNA — open source, end-to-end encrypted, Swiss-jurisdiction data centres, integrated with Proton's identity ecosystem. Free tier exists and is usable. The killer differentiator: bundled email aliases that route to your real email, killing one of the main vectors of credential reuse.

What we like:

• Free tier with unlimited logins, 50 vault items, 10 hide-my-email aliases.
• Email alias generation built into vault — sign up for a service with a unique throwaway address that forwards to your real inbox.
• Open source on GitHub — full client code published.
• Swiss data residency, strong privacy regulations.
• Tightly integrated with ProtonMail / ProtonVPN if you use those — single login, single subscription.
• End-to-end encrypted vault data, zero-knowledge architecture.

What we don't:

• Newer product — fewer years of audit history compared to Bitwarden.
• Smaller community, less third-party tooling (no Vaultwarden equivalent).
• Paid tier ($1.99-3.99/month) is reasonable but ties you to Proton's bundled ecosystem.
• Mobile autofill matures slower than Bitwarden / 1Password — improving but lagging.

Verdict: excellent if you already use ProtonMail or want to consolidate to a privacy-first vendor. Otherwise Bitwarden is more mature.

4. KeePassXC — best for power users and offline-first

Score: 80/100. Best for: technical users who want zero cloud involvement.

KeePassXC is the cross-platform fork of KeePass 2 — a local .kdbx file you bring your own sync to. It's free forever, completely open source, audited (BSI, the German federal IT security office, audited the original KeePass in 2014), and runs offline by design. The trade-off is the operational overhead: you handle sync (Dropbox, syncthing, or a USB stick), you handle browser integration setup (KeePassXC-Browser via native messaging), you handle mobile (KeePassDX on Android, Strongbox or KeePassium on iOS — third-party, all separately maintained).

What we like:

• Completely free, no tiers, no upsell — has been since 2003.
• Offline by default — your .kdbx file lives where you put it.
• Open source with twenty-plus years of audit history.
• Supports cipher options most modern PMs don't (Twofish, Serpent, ChaCha20 in addition to AES-256).
• Argon2 KDF with configurable parameters (KDBX 4 format).
• The .kdbx format is rock-stable — files written in 2010 still open in 2026.

What we don't:

• Bring-your-own-sync — Dropbox, Nextcloud, syncthing all work but you set it up.
• Browser integration via third-party extension (KeePassXC-Browser) with native messaging handshake — non-obvious setup.
• Mobile experience is third-party apps reading the same .kdbx — fine but not first-party-polished.
• No first-class organisation/sharing — workarounds via shared .kdbx file in cloud folder.
• Multi-device sync conflicts can corrupt the file if two devices write simultaneously through cloud sync.

Verdict: KeePassXC is for technical users who explicitly want offline-first. Everyone else is better served by Bitwarden's hosted-or-self-hosted model. Bitwarden vs KeePass →

5. NordPass — best NordVPN bundle play

Score: 75/100. Best for: existing NordVPN subscribers.

NordPass is from Nord Security (NordVPN). It's a clean, recently-modernised password manager with XChaCha20 cipher (a slightly different choice from the AES-256 industry standard). Free tier is technically unlimited but limits to one device active at a time — which is genuinely worse than it sounds because logging in on a second device kicks the first one off. Paid tier is $1.79-2.49/month at promotional rates, often bundled discounted with NordVPN.

What we like:

• Modern, polished UI — clean design, fast performance.
• XChaCha20 cipher — different from the standard AES-256 but equally secure, conceptually clean.
• Bundled discounts with NordVPN — if you use Nord's VPN, the bundled subscription is reasonable value.
• Audited by Cure53.
• No public breach record.

What we don't:

• Free tier "unlimited but one device at a time" is functionally similar to LastPass's 2021 mobile-or-desktop change. Inconvenient.
• Closed source — can't independently verify claims.
• No self-hosting option.
• Pricing is "promotional" — expect renewal-rate increases after first year.
• Tied to Nord ecosystem — if you don't use NordVPN, no bundle benefit.

Verdict: if you're already a NordVPN customer, the bundle math works. Otherwise Bitwarden delivers more for less.

6. Dashlane — best paid-only, with VPN bundle

Score: 72/100. Best for: users who want VPN bundled with PM and don't mind premium pricing.

Dashlane removed their native desktop app in 2022 and went web-only — that's still surprising for a category leader. The free tier is severely limited (50 passwords max, single device). Premium at $60/year includes Hotspot Shield VPN, which is the unique selling point. Pricing is on the high end of the category.

What we like:

• Polished UI design.
• Bundled Hotspot Shield VPN at Premium — saves ~$30/year if you wanted both products separately.
• Dark Web Monitoring built-in.
• Strong autofill reliability.

What we don't:

• Free tier of 50 passwords on one device — useless beyond initial setup.
• $60/year individual is 6× Bitwarden Premium for arguably similar core functionality.
• Removed desktop app in 2022 — only browser extension and web vault remain. Unusual category move.
• Closed source.
• No self-hosting.

Verdict: only worth it if you specifically want the VPN bundle. Bitwarden vs Dashlane →

7. RoboForm — best for forms-heavy workflows

Score: 68/100. Best for: legacy users with established RoboForm vaults.

RoboForm has been around since 1999 — it predates most of this category. The legacy shows. The product still excels at form-fill (its original raison d'être), but UI design and modern features lag. Free tier exists but is limited to one device. Paid is $25/year, which is mid-range pricing. The ageing UI is the main reason it ranks lower than its functional capabilities suggest.

What we like:

• Best-in-class form fill — for filling out long forms (insurance, government, signup wizards), RoboForm's pattern recognition is more reliable than competitors'.
• Long history — 25+ years of continuous operation, no major security incidents.
• Reasonable pricing at $25/year individual.

What we don't:

• UI feels dated — a generation behind 1Password / Bitwarden in design.
• Free tier limited to one device.
• Closed source.
• No self-hosting.
• Fewer recent third-party integrations / no thriving developer ecosystem.

Verdict: existing users have no urgent reason to switch. New users should pick something more modern.

8. LastPass — avoid unless migration is genuinely too costly

Score: 45/100. Best for: existing users who haven't migrated yet (and should).

The 2022 breach is the headline. Encrypted vault backups were exfiltrated from third-party cloud storage; the backup format included unencrypted URL fields (giving attackers the list of which sites users had accounts on, even without decrypting credentials). PBKDF2 iteration counts on legacy accounts were 5,000 — well below the 600,000+ industry consensus, making weak-master-password vaults brute-forceable. Disclosure timeline was slow and incomplete. Most users have already migrated; the remainder face friction more than risk.

What we like:

• Mature feature set — categories, sharing, reporting all exist.
• Wide platform coverage.
• Polished UI on most platforms.

What we don't:

• Three significant security events in eight years (2015 phishing, 2019 vulnerability, 2022 breach with vault data exfiltrated).
• Free tier 2021 change forces mobile-or-desktop choice — pay $36/year just for cross-device.
• Closed source.
• No self-hosting.
• Legacy account default PBKDF2 iterations were dangerously low.
• Disclosure trust eroded after 2022.

Verdict: migrate. How to migrate from LastPass to Bitwarden →

Side-by-side at a glance

Product	Free tier	Paid (individual)	Open source	Self-host	Public breach
Bitwarden	Unlimited, 2 devices	$10/year	Yes	Yes	No
1Password	None — 14d trial	$36/year	Partial	No	No
Proton Pass	50 items, unlimited logins	$23.88/year	Yes	No	No
KeePassXC	Fully free	n/a	Yes	n/a (file-based)	No
NordPass	1 active device	$21.48/year	No	No	No
Dashlane	50 items, 1 device	$60/year	No	No	No
RoboForm	1 device	$24.95/year	No	No	No
LastPass	Mobile-or-desktop	$36/year	No	No	2015, 2019, 2022

How to pick — three quick decision paths

Path A: "I want free and good"

Pick: Bitwarden. The free tier is unconditional, two devices, full feature set. There's no free tier in the category that comes close. Premium upgrade later costs $10/year if you want TOTP and attachments — still cheapest among paid options.

Path B: "I'll pay for polish"

Pick: 1Password. Best UX in the category. Built-in Watchtower. Travel Mode. The Secret Key adds extra entropy. $36/year individual is the price of admission; family at $60/year for 5 users covers most households.

Path C: "I want offline / paranoid / technical"

Pick: KeePassXC. Local .kdbx file, BYO sync, no cloud. Or self-host Bitwarden via Vaultwarden if you want cloud-style sync but on your own server.

When NOT to pick from this list

Two scenarios where none of these eight is the right answer:

• You're entirely Apple-ecosystem and content with iCloud Keychain. Apple's built-in is fine for most personal-use cases inside Apple. Switching to a third-party PM mainly buys you cross-platform access — which matters only if you also use non-Apple devices.
• You manage hundreds of secrets in CI/automation contexts. Personal-vault PMs aren't built for that scale. Look at HashiCorp Vault, AWS Secrets Manager, or Bitwarden's separate Secrets Manager product.